StackState Self-hosted v4.6.x
The Events Perspective
StackState defines an event as a timestamped record of an activity or change that an observer of the platform should be aware of. Events help you make sense of changes that impact your IT landscape and are a great asset when troubleshooting problems.
StackState works with three different kinds of events, note that not all of these are available in the Events Perspective:
- Internally generated events - Events generated by StackState. The following event types will be listed in the Events Perspective: Anomaly, Component/relation created, Component/relation deleted, Component/relation updated, Health state changed, Version changed.
- Events from telemetry streams - Event data can be received in a log telemetry stream. Events from these streams will not be listed in the Events Perspective, however, they can be monitored by a check. Checks can trigger a health state change event, which would then be listed in the Events Perspective as an internally generated event.
- Events from external sources - Some StackState integrations can retrieve events from external systems. All events retrieved from external systems will be listed in the Events Perspective.
All events in StackState have a category assigned based on the event type and source system. The available categories are Activities, Alerts, Anomalies, Changes and Others. Events received from external systems will have a category attached to them when they arrive in StackState. If no valid category is included in an event, it will be grouped under the category Others.
Click on an event to display an overview of the event details in the Properties pane on the right of the screen. Events from external systems will also include links through to relevant information in the source system here:
- Elements - The components and/or relations involved in the event.
- Event type - A description of the event type.
- Event time - The time at which the event occurred. For events from an external system, this will be the timestamp from the external system. Click on the timestamp to time travel to the topology at the moment that the event occurred.
- Processed time - For external events, this is the time that the event was received by StackState. For internally generated events that affect the graph database, this is the time data was stored in the graph database. Click on the timestamp to time travel to the topology at the moment that the event was processed by StackState.
- Links - Direct links to an external source of an event. For example, a ServiceNow change request or JIRA ticket.
- Description - Additional information about the event. For example, the context of the event or its importance.
- SHOW ALL PROPERTIES - Click to access all data included in the event.
Properties of an event
The events displayed in the Events Perspective and in the Events list in the details panes on the right-hand of the StackState UI can be filtered in the View filters pane on the left-hand side of the StackState UI.
The topology filters set in the View Filters pane define the elements (components and relations) for which events will be displayed. Only events relating to elements that match the applied topology filters or the view itself will be visible. You can adjust the components for which events are displayed by updating the topology filters.
The Events Perspective and events lists show events that match the Telemetry interval selected in the timeline at the bottom of the StackState UI. Adjust the telemetry interval to show only events that were generated at that time.
The Events Perspective lists events that were generated:
This allows you to time travel to both events generated by topology elements available at a specific point in history and events generated within a specific time window. Selecting a new topology time will time travel to the topology that was available at that point in history. The events list will be updated to include events for the topology elements available at that time and within the selected telemetry interval.
- Adjust the Telemetry interval to increase or decrease the number of events displayed.
- Adjust the Topology time to time travel to the topology available at that point in history. Events generated within the selected telemetry interval by topology elements that existed at the topology time will be displayed.
- Click on a timestamp from the Properties of an event to jump to this topology time. This will update the events list to display events that were generated:
- by topology elements that existed at that moment in time.
- within the specified telemetry interval (this will be adjusted to fit the selected timestamp if required).